DevStart Blogi Napisano Listopad 16, 2015 Zgłoś Napisano Listopad 16, 2015 Recent Windows 10 update brought three new fields in the Process Environment Block structure: x86 Field Type Field Name x64 offset size offset size 0x250 0x004 uintptr_t TppWorkerpListLock 0x388 0x008 0x254 0x008 struct _LIST_ENTRY TppWorkerpList 0x390 0x010 0x25C 0x200 void*[128] WaitOnAddressHashTable 0x3A0 0x400 It seems that all three of them are not so new to […]Wyświetl pełny artykuł Cytuj
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.